No problem. I work in info-sec/comms-sec in the UK and it's an invaluable resource for guidelines on information handling and security practice. We often refer

No problem. I work in info-sec/comms-sec in the UK and it's an invaluable resource for guidelines on information handling and security practice. We often refer to it when we want to set a policy in the company I work for, for example on password strength in any given year. I think it can be very useful also for startups that don't specialise in security to make sane security policies based on something "official".